Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/5ffd159f-4992-32fc-a662-70d42206aa8c.roa
File:                     5ffd159f-4992-32fc-a662-70d42206aa8c.roa (raw, json)
Hash identifier:          UXinyWn+pQvwTuXU6llVbD9hLPI1D8DFbnUXVa9Fp3Y=
Subject key identifier:   EB:30:AE:8B:80:AA:93:DC:2E:E6:4E:91:08:E7:B3:EE:F3:1F:B7:8F
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F432858488AE0B36A8EA1A837E39DE600
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/5ffd159f-4992-32fc-a662-70d42206aa8c.roa
Signing time:             Tue 14 Jan 2025 14:00:51 +0000
ROA not before:           Tue 14 Jan 2025 14:00:51 +0000
ROA not after:            Mon 14 Apr 2025 13:00:51 +0000
asID:                     149440
IP address blocks:        166.88.2.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:8a:e0:b3:6a:8e:a1:a8:37:e3:9d:e6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Jan 14 14:00:51 2025 GMT
            Not After : Apr 14 13:00:51 2025 GMT
        Subject: CN=719f86ca-057b-4f3b-a994-60fe0998d026
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:b0:09:66:00:54:9e:5e:2f:4c:2e:7b:57:90:
                    28:6c:d1:70:f7:f4:41:44:a7:2a:50:86:dd:fc:6d:
                    bc:0c:2c:d1:d6:0b:ae:b2:36:32:a0:12:f1:ff:e5:
                    3c:33:c5:d8:1b:d7:79:c2:3a:a1:3b:5a:42:cd:74:
                    ef:5f:13:50:f6:27:bb:27:74:fd:41:67:aa:fa:a7:
                    9d:5d:01:02:1a:bb:c5:e0:0b:54:08:78:2f:e3:cd:
                    32:74:d5:26:6d:f9:40:3f:fc:4f:5e:fa:57:0b:ff:
                    f5:d0:e9:a0:c5:08:87:32:d8:57:b8:9b:0b:d6:3b:
                    28:0d:8e:78:4f:0b:16:2f:6c:05:74:6c:b6:21:dc:
                    9b:04:0d:a8:8f:93:65:cd:07:a3:47:cc:cb:c9:23:
                    08:9c:b6:04:3f:e3:a6:f7:5c:78:7a:37:c4:ab:b0:
                    79:c6:1e:cb:e4:b0:78:c2:01:62:83:7d:53:bd:7d:
                    9b:5d:c9:ec:07:2a:ae:48:e1:19:00:be:83:b2:94:
                    7b:49:e7:06:66:e0:a6:75:0e:cc:85:48:d4:e8:cb:
                    95:3d:e7:dd:65:50:d9:74:67:8a:83:52:8a:f2:0b:
                    a9:bd:c9:14:6b:7f:b4:49:1c:d1:ba:99:1b:94:a6:
                    06:91:f5:d3:1f:d0:da:41:25:6d:f3:e1:e6:5a:9d:
                    55:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:30:AE:8B:80:AA:93:DC:2E:E6:4E:91:08:E7:B3:EE:F3:1F:B7:8F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/5ffd159f-4992-32fc-a662-70d42206aa8c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.88.2.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:c6:ca:f8:26:3c:5b:84:12:3b:6c:19:7b:8b:c9:65:d8:0b:
         b1:d6:90:a3:70:18:e9:43:78:79:6b:87:0b:96:3d:ea:48:b4:
         14:64:98:ce:60:24:41:61:70:1d:b4:16:d0:d5:13:0f:b8:e8:
         06:0b:05:96:9a:03:41:4e:53:1e:0c:88:3c:b6:fb:24:b9:69:
         cf:f5:ae:c3:43:8b:b6:8e:8a:04:6e:fc:08:02:83:4e:e9:10:
         08:72:0c:7c:bf:7c:79:9c:ea:e3:c7:19:b4:71:42:2c:ce:75:
         18:1c:83:19:2b:5a:db:f4:ba:38:42:cf:bf:e2:e1:eb:b1:92:
         75:b2:bb:34:09:99:ac:f4:af:68:22:b3:b7:6f:0c:b3:a1:f9:
         02:f3:e4:59:5b:37:39:9c:1f:94:b3:43:e9:34:6c:8c:24:04:
         0b:e9:32:be:19:ce:53:f4:79:b8:e2:70:ec:8f:c7:13:12:75:
         4a:70:f8:66:cd:ed:e5:3b:ef:80:1d:5e:34:60:df:cb:03:e8:
         1b:d8:b9:d0:a8:82:f0:44:b7:58:c7:9a:9e:5f:9d:13:08:da:
         5e:85:0b:93:10:3a:a4:68:9e:d0:8c:17:b3:d9:5a:d1:97:80:
         62:c7:72:97:98:76:0f:69:ab:48:92:a9:6b:7b:85:f0:1b:44:
         46:ee:9e:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 08:16:51 2025 by rpki-client